Over reliance on patches?

Business needs to adopt a more holistic approach to security instead of relying on quick-fix patches to combat network attacks according to Top Layer Networks, Australia and New Zealand manager, David Britt. While patches may be an time saving necessity, they do not solve the underlying issues associated with network security in the same way as preventative measures, "there needs to be a much stronger emphasis on planned security measures, with an increasing focus on preventative infrastructure rather than "˜prescription-style' cures," Britt said.

New network threats need a multi-layered defence strategy to combat both the original infection as well as mitigate the ensuing denial-of service (DoS) attack. For example, the Code Red worm exploited a vulnerability to compromise web servers using them to attack other web servers and thereby launching a DoS attack via the Internet, according to ISS Australasian managing director Kim Duffy. "When a company chooses not to arm itself with an effective, coordinated defence capability, it needs to understand both the moral and legal responsibilities," Duffy said.